Hi Support,
I would like to have URL to Turn Off like CUBA to hide the URL.
How can I disable it ?
Regards,
CK
Hello!
If I understand correctly, you’re talking about Jmix 2.x. Unlike CUBA, it is not based on Vaadin 8 / GWT but on Flow UI (latest Vaadin). In Flow UI navigation is built around routes, and the URL is a core part of how the UI works, so there is no supported way to completely hide it on the client side like in CUBA.
But you can hide urls as much as you can via dialogs. DialogsWindows are not presenting any urls and avoiding url usage but costing complex nesting of Views(Screens).
Best regards,
Dmitry
@d.cherkasov Yes, I’m referring to JMIX 2.x
I would like to hide the URL because we want to prevent user to access views via URL. E.g. If User A knows the URL however he not suppose to have access to the views. We want to have some sort of control.
How can I limit it?
There is only one correct way to limit access from user is Roles. Permission is only correct way to restrict users from unauthorized accesses. No need to hide urls. And, obviously, you shouldn’t place any sensentive data in URL paths.
How can we limit the data access, I noticed the UUID is appeared at URL there. We have a scenario that some records are supposed to filter out.
The User A can see the filter out record if they find out the UUID then replace at URL there.
2 ways to implement it - 1 spring url filter / security filter. Second is to make something like
onInit() {
checkEntityAccess()
}
Or to make it more generic, make own annotation that would be put on screen and before showing it, filter will be applied and restrict access from unauthorized resources.